Or any of the following licenses that include the SaaS Security Inline license:

When one or more NGFW or Panorama successfully receives the enabled policy rule recommendation, the SaaS Security web interface indicates Synced; otherwise, the policy rule status is blank.

The most common resolution to a policy rule recommendation that is for the NGFW administrator or Prisma Access administrator to refresh/fetch the latest data because neither Panorama nor the NGFW cache any policy recommendations. Synced does not mean that your NGFW administrator imported the recommendation as a rule and saved it to the rulebase.